juaromu / wazuh-misp
☆17Updated 2 years ago
Alternatives and similar repositories for wazuh-misp:
Users that are interested in wazuh-misp are comparing it to the libraries listed below
- ☆34Updated last year
- ☆16Updated 3 years ago
- ☆19Updated 3 years ago
- Wazuh integration TheHive☆35Updated 2 years ago
- ☆17Updated 3 years ago
- Useful scripts for those administering Wazuh☆83Updated 3 months ago
- Tools for Wazuh by Juan C. Tello☆14Updated 3 years ago
- Run Velociraptor on Security Onion☆37Updated 2 years ago
- Convert Sigma rules to Wazuh rules☆64Updated last year
- Personal scripts☆13Updated 7 months ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆65Updated 3 years ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆40Updated last year
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆109Updated 2 years ago
- ☆31Updated 3 years ago
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago
- ☆54Updated 3 years ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆29Updated 7 months ago
- Cybersecurity Incident Response Plan☆90Updated 4 years ago
- A Sigma to Wazuh / OSSEC converter including a generated Windows Sysmon ruleset☆33Updated 4 years ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Updated 3 years ago
- Repository for SPEED SIEM Use Case Framework☆53Updated 5 years ago
- Our collection of Wazuh detection rules for our Offense Lab☆14Updated 3 years ago
- Incident Response Plan for all major incidents including cheatsheets for both linux and windows☆14Updated 4 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆27Updated 4 years ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆46Updated last month
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆70Updated last year
- CrowdStrike Falcon Queries For Advanced Threat Detection☆17Updated 2 months ago
- ☆34Updated 4 years ago
- Docker configurations for TheHive, Cortex and 3rd party tools☆121Updated 2 years ago
- Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.☆82Updated last month